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FIG. 3A 



Challenge the user, 
including a random 
challenge nonce 




Authenticate the 
user using a 
mediator 



Deny access to the 
resource 



FIG. 3B 
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Encrypt the random 
challenge nonce 
using the shared 
long-term secret 



Send the encrypted 
random challenge 
nonce back to the 
local identity space 
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Is the 
encrypted 
random 
challenge nonc^ 
correct? 

No 




FIG. 3C 
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